Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
File: 25d38479-752d-418e-a4fb-397c5aa432f8.roa (raw, json)
Hash identifier: gV3TKKysSoypfIn8+KwRiUQ7vyYHhneXbNO6qbORSu4=
Subject key identifier: 78:FD:EE:C4:B5:4C:F2:2D:36:EF:1D:72:01:D2:BD:B9:6F:CE:50:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7168AA0DFFA189E52BD3C66DCC5C99D023480793
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
Signing time: Tue 04 Aug 2026 01:10:04 +0000
ROA not before: Tue 04 Aug 2026 01:10:04 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:68:aa:0d:ff:a1:89:e5:2b:d3:c6:6d:cc:5c:99:d0:23:48:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:04 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=ab8b96382c0910bec6840591cbd00201637dbf2c12cdd63d007cd7f4a90fcad8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:d1:7f:85:73:c1:5b:8c:ab:b6:79:44:c9:
f1:d1:7f:56:01:69:28:45:f6:2d:0c:65:e1:f6:25:
7e:f8:35:9a:b6:1a:fa:25:34:af:54:62:0f:97:31:
16:e6:e9:fd:e9:4b:36:0f:da:a8:07:72:18:07:12:
4b:5a:ba:4a:e2:c5:b9:d9:46:18:f7:fc:44:c7:b6:
f6:1c:a1:8a:b1:a6:58:b7:13:71:f9:81:a3:4a:df:
08:ac:8a:13:32:31:a0:db:aa:cc:94:97:fb:8a:b5:
1c:2a:9b:ed:f7:4e:ca:e5:c4:c6:91:d3:7f:61:e6:
4a:a1:db:ae:02:ee:5f:c9:6e:be:c0:1a:fc:01:92:
6d:36:37:57:31:41:92:5e:04:cc:ff:4c:ae:45:12:
5b:1c:7e:72:46:27:0d:95:32:1f:31:40:da:06:e9:
eb:a7:e0:69:e2:a2:d4:f5:17:2d:94:99:0c:7a:e2:
c2:70:2a:aa:36:9b:d5:b1:32:97:50:27:a2:e5:a5:
31:fe:c1:a0:b7:19:68:44:a8:4b:0f:ac:c6:10:d3:
4e:f3:2f:9e:52:ae:9f:37:72:69:ba:7a:e1:11:ab:
c3:b2:8b:ba:e8:9e:66:41:4d:a3:d1:74:e5:2f:11:
bf:fd:f1:4e:58:e7:e3:35:9d:31:dc:45:26:ce:a6:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FD:EE:C4:B5:4C:F2:2D:36:EF:1D:72:01:D2:BD:B9:6F:CE:50:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:800::/40
Signature Algorithm: sha256WithRSAEncryption
bd:be:62:ac:25:6d:fd:76:f7:33:bd:9f:19:95:02:1a:e5:28:
0c:86:fb:30:2a:41:98:2f:ce:a7:6c:fc:df:1a:9b:2a:f3:12:
1a:01:3c:bc:13:4d:21:43:12:44:0d:22:35:41:55:d3:41:e4:
52:4c:36:5e:40:23:d1:c3:ac:94:bf:57:33:16:86:c4:1a:68:
28:55:8b:b8:33:15:7c:11:1b:24:c9:99:b8:43:76:d5:0a:8e:
64:99:de:10:6c:5f:0b:33:c4:98:07:5f:0f:62:54:1e:b7:fd:
87:c1:fe:52:88:b7:8c:18:5f:28:9c:f9:85:34:79:83:ab:73:
5e:e2:20:b8:1e:b5:7b:fc:98:5e:66:73:e9:97:d3:04:81:bd:
e4:39:7a:ac:27:9c:7a:67:ac:56:a5:f3:1a:3c:ce:0a:94:3f:
d4:19:5d:81:d6:74:97:07:8c:e7:36:50:9e:cc:30:c0:8f:b0:
5a:ca:12:79:ef:b0:14:c3:1c:b6:2f:68:9d:4d:70:c3:ca:d5:
e6:d3:31:9f:43:9e:32:70:df:0e:8e:be:f4:11:d9:50:ef:cc:
f8:0e:c6:4a:b1:36:80:3a:9f:57:f3:f2:e0:ab:3a:f9:56:7d:
ff:a6:31:36:17:e4:18:1e:21:e9:96:0d:93:8e:85:ae:18:47:
98:3b:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:12 2026 by rpki-client